{
  "osquery_time": "1592478128",
  "datetime": "2020-06-05T12:27:00.1729766Z",
  "source": "Application",
  "provider_name": "Microsoft-Windows-Winlogon",
  "provider_guid": "{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}",
  "event_id": "6000",
  "task_id": "0",
  "level": "4",
  "keywords": "0x80000000000000",
  "data": "{\"EventData\":{\"\":\"SessionEnv\",\"Binary\":\"D9060000\"}}",
  "computer_name": "DESKTOP-4AR7BIA"
}
